Windows 10 includes numerous features that are used to store and synchronise data using cloud services from Microsoft. This results in the risk of these services being used, whether unwittingly or carelessly, for data that could be personal or critical to an organisation. At the same time, storing data with third parties (which are usually located abroad) can result in infringements of data protection law. If a user logs into a new device using an already activated Microsoft account, the Microsoft cloud services utilised by the user will be set up automatically on the device. An organisation's data may thus be synchronised accidentally to the private devices of employees. As another example, a default setting of Windows 10 is to back up BitLocker recovery keys directly in the cloud via the user's Microsoft account, which constitutes providing sensitive cryptographic secrets to third parties.